$ rpki-client -vvf rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft File: mFDq_-09ooRdUfCVrBEkUIjVYj8.mft (raw, json) Hash identifier: aFSowatMXkUHpPO4FjMct2peanSZSPzlubYJQo4GAbU= Subject key identifier: 1C:3E:A0:4B:0B:BE:65:71:AF:31:80:96:B5:1F:46:14:20:AF:79:36 Authority key identifier: 98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F Certificate issuer: /CN=A91678AA/serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F Certificate serial: 15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft Manifest number: 12 Signing time: Sun 19 Oct 2025 11:31:40 +0000 Manifest this update: Sun 19 Oct 2025 11:31:38 +0000 Manifest next update: Sun 26 Oct 2025 11:31:38 +0000 Files and hashes: 1: mFDq_-09ooRdUfCVrBEkUIjVYj8.crl (hash: shBQXrLn73ozMHldYVpF3hpbmYP7NtypoehjGNb6ISk=) 2: ACA405589E7011F083978F1AC4F9AE02.roa (hash: YmblmfroJEPUhmWz7o6a8qxz0P00eBgbcYH8HDNSw40=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:31:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21 (0x15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91678AA, serialNumber=9850EAFFED3DA2845D51F095AC11245088D5623F Validity Not Before: Oct 19 11:31:38 2025 GMT Not After : Oct 26 11:31:38 2025 GMT Subject: CN=68f4cc1b-4223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:7a:25:17:f9:56:1e:e7:0b:f0:74:e6:14:4d: eb:b5:63:ee:9a:08:23:84:29:86:a1:57:fc:9e:32: e4:5a:c3:bf:25:ce:9a:13:ea:e0:84:5a:38:0f:36: 73:7b:df:41:1f:02:64:cc:96:9b:2b:6d:b9:9e:4b: 42:e3:bf:aa:5b:0c:d9:dc:77:9b:50:4e:46:7b:16: 3b:db:28:69:09:67:5c:13:32:9b:b9:ea:f0:ef:b1: 7c:14:fe:02:f0:d0:d3:39:82:da:b6:d2:81:ac:1f: 3a:94:75:a9:85:b1:20:69:fd:3b:91:eb:d5:22:e2: 3d:b5:62:66:19:59:9a:89:33:31:45:5e:81:b4:83: 92:1a:08:e9:b8:38:7c:b7:7d:67:db:26:6d:a0:b1: 19:3b:b7:7c:72:d2:e5:ec:68:4a:6b:cf:b5:90:87: 5b:ce:25:be:59:40:4a:cd:b3:ec:df:ce:a5:cf:42: 68:ca:55:86:17:35:3f:f6:1c:e4:07:a6:d8:04:a7: 68:3b:7a:41:a0:2e:53:c6:99:65:2d:b8:48:1b:ab: f9:98:32:d0:99:e5:c5:58:43:b3:15:7c:aa:a1:54: 58:80:5f:ca:82:12:5a:3b:6d:92:d9:df:37:95:d7: 81:53:49:40:cb:74:79:07:a2:86:89:64:37:6b:35: 3f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3E:A0:4B:0B:BE:65:71:AF:31:80:96:B5:1F:46:14:20:AF:79:36 X509v3 Authority Key Identifier: keyid:98:50:EA:FF:ED:3D:A2:84:5D:51:F0:95:AC:11:24:50:88:D5:62:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFDq_-09ooRdUfCVrBEkUIjVYj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91678AA/37C817FC974411F0804A5918C4F9AE02/mFDq_-09ooRdUfCVrBEkUIjVYj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:47:49:aa:c0:dd:bc:d9:86:88:b3:68:2f:62:cc:85:e8:02: ca:85:44:68:69:82:0c:1e:a6:ae:cd:46:52:6d:d0:fe:22:f5: 85:f9:09:29:29:6b:ed:11:90:17:ff:3b:21:da:6e:f8:ed:9e: 54:fd:f9:d9:4f:d1:bd:04:da:07:5f:39:c3:b0:e6:01:8a:ff: 16:49:df:71:0e:dd:0b:11:ab:68:b3:4b:74:26:15:f0:50:17: 96:4b:89:f6:c7:a7:89:4f:76:75:74:06:e0:df:e1:bf:6b:72: b4:3b:ee:51:8f:5a:84:3e:94:c5:19:e8:e2:8e:16:75:09:49: fc:c3:03:36:93:4a:51:f7:37:ce:18:10:dd:e8:1e:fd:7f:2a: da:80:82:8b:54:18:fe:b1:44:b1:32:06:b9:a4:01:1f:46:63: 40:4a:70:b8:76:01:17:4a:48:69:1a:cb:69:b3:59:ff:72:38: 46:c8:bf:6e:bb:0a:d3:56:26:9d:be:b7:b5:f1:57:99:40:7e: 1d:e4:d6:24:6c:64:cd:27:1a:b5:5f:9a:b1:70:5a:0f:ca:d7: 25:0b:52:47:5d:ff:50:64:42:71:52:0a:5f:9b:f3:76:cf:b4: ed:56:c0:04:04:14:82:66:03:02:99:45:aa:d2:2e:27:2c:80: 4c:67:e4:1d -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 NzhBQTExMC8GA1UEBRMoOTg1MEVBRkZFRDNEQTI4NDVENTFGMDk1QUMxMTI0NTA4 OEQ1NjIzRjAeFw0yNTEwMTkxMTMxMzhaFw0yNTEwMjYxMTMxMzhaMBgxFjAUBgNV BAMTDTY4ZjRjYzFiLTQyMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbeiUX+VYe5wvwdOYUTeu1Y+6aCCOEKYahV/yeMuRaw78lzpoT6uCEWjgPNnN7 30EfAmTMlpsrbbmeS0Ljv6pbDNncd5tQTkZ7FjvbKGkJZ1wTMpu56vDvsXwU/gLw 0NM5gtq20oGsHzqUdamFsSBp/TuR69Ui4j21YmYZWZqJMzFFXoG0g5IaCOm4OHy3 fWfbJm2gsRk7t3xy0uXsaEprz7WQh1vOJb5ZQErNs+zfzqXPQmjKVYYXNT/2HOQH ptgEp2g7ekGgLlPGmWUtuEgbq/mYMtCZ5cVYQ7MVfKqhVFiAX8qCElo7bZLZ3zeV 14FTSUDLdHkHooaJZDdrNT/bAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUHD6gSwu+ ZXGvMYCWtR9GFCCveTYwHwYDVR0jBBgwFoAUmFDq/+09ooRdUfCVrBEkUIjVYj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3OEFBLzM3QzgxN0ZDOTc0 NDExRjA4MDRBNTkxOEM0RjlBRTAyL21GRHFfLTA5b29SZFVmQ1ZyQkVrVUlqVllq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbUZEcV8tMDlvb1JkVWZDVnJCRWtVSWpWWWo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3 OEFBLzM3QzgxN0ZDOTc0NDExRjA4MDRBNTkxOEM0RjlBRTAyL21GRHFfLTA5b29S ZFVmQ1ZyQkVrVUlqVllqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKNHSarA3bzZhoizaC9izIXoAsqFRGhpggwepq7NRlJt0P4i9YX5CSkp a+0RkBf/OyHabvjtnlT9+dlP0b0E2gdfOcOw5gGK/xZJ33EO3QsRq2izS3QmFfBQ F5ZLifbHp4lPdnV0BuDf4b9rcrQ77lGPWoQ+lMUZ6OKOFnUJSfzDAzaTSlH3N84Y EN3oHv1/KtqAgotUGP6xRLEyBrmkAR9GY0BKcLh2ARdKSGkay2mzWf9yOEbIv267 CtNWJp2+t7XxV5lAfh3k1iRsZM0nGrVfmrFwWg/K1yULUkdd/1BkQnFSCl+b83bP tO1WwAQEFIJmAwKZRarSLicsgExn5B0= -----END CERTIFICATE-----Generated at Mon Oct 20 08:27:16 2025 by rpki-client